- Shipped
- September 27, 2026 at 5:36 AM UTC
- Author
- Kamo
- Commit
- 640e310
The guest half of SP11's AI profile: the files the profile writes (LightDM autologin at 1280x800, kiosk, x11vnc and ydotoold units, Chrome wrapper and managed policy), the per-wake MCP bearer store, the keep-awake hold lease, the rotating x11vnc password file, and the software-kit and sign-in link validators. Beyond the plan text: every validator uses fullmatch (Python's $ accepts a trailing newline, Java's matches() does not); the sign-in link's next is judged decoded, as ComputeService's LoginUrls.onSitePath does (%2F/, /%2F and %2F%5C were accepted); a token's expiresAt must be a finite number (json.loads reads Infinity and NaN); releasing a hold that already ran out keeps when it ended for the idle clock.